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1.What are indirect costs to security? 

A. Harm to Reputation Loss of goodwill Loss of employees Harm to employee morale 

B. Harm to Reputation Loss of goodwill Loss of employees Insurance Costs 

C. Increased Alarm Rates Indirect Career Progression Loss of employees Harm to employee morale 
D. Harm to Reputation Loss of goodwill Loss of contract Harm to Business 

Answer: A 


2.What members should comprise a vulnerability assessment team? 

A. Security specialist (leader) Security Systems engineer Response expert Data analyst Operations 
Representatives Subject matter experts (locksmiths, technical writers, legal experts) 

B. Security specialist (leader) Security Systems engineer Response expert HR expert Operations 
Representatives Subject matter experts (locksmiths, technical writers, legal experts) 

C. Security specialist (leader) Security Systems engineer Response expert CFO Operations 
Representatives Subject matter experts (locksmiths, technical writers, legal experts) 

D. Security specialist (leader) Security Systems engineer Response expert CISO Operations 
Representatives Subject matter experts (locksmiths, technical writers, legal experts) 

Answer: B 


3.What is the goal of a vulnerability assessment? 

A. To identify physical protection system (PPS) components in the functional areas of site security and to 
gather data to estimate site performance against particular threats. 

B. To identify physical protection system (PPS) components in the functional areas of entry and access 
and to gather data to estimate their performance against particular threats. 

C. To identify physical protection system (PPS) components in the functional areas of detection, delay 
and response and to gather data to estimate their performance against particular threats. 

D. To identify physical protection system (PPS) components in the functional areas of emergency 
management and business continuity and to gather data to estimate their performance against particular 
threats. 

Answer: C 


4.What are the three primary functions of a physical protection system (PPS)? 
A. Detection Delay Response 

B. Assess Report Response 

C. Record Deny Respond 

D. Identify Deny Respond 

Answer: A 


5.What are the two key measurements for the effectiveness of the detection function of a physical 
protection system? (PPS) 

A. Probability of sensing adversary action and Implementation of effective countermeasures 

B. Target identification and Isolation of the incident 

C. Implementation of countermeasures Evaluation of effectiveness 

D. Probability of sensing adversary action, Time required for reporting and assessing the alarm. 
Answer: A 
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6.How is the response function of a physical protection system (PPS) measured 

A. The response function of a PPS is measured by the time between receipt of communication of 
adversary action and the arrest of the adversary 

B. The response function of a PPS is measured by the time between the alarm time and incident closure 
C. The response function of a PPS is measured by the time between receipt of communication of 
adversary action and the arrival of law enforcement 

D. The response function of a PPS is measured by the time between receipt of communication of 
adversary action and the interruption of the adversary action 

Answer: D 


7.What is the vulnerability assessments team’s primary job as it pertains to a physical protection system 
(PPS)? 

A. To determine security system effectiveness. 

B. To secure a site 

C. To record system violations 

D. To determine the alarm response ratio 

Answer: A 


8.What are the two basic analytical approaches to a risk assessment? 
A. Compliance based and Descriptive 

B. Quantitively and Qualative 

C. Metrics and Graphical 

D. Compliance based Performance based 

Answer: D 


9.A well-engineered physical protection system (PPS) exhibits which three characteristics? 

A. Protection in Depth Minimum consequence of component failure (redundancy) 360 Coverage 

B. Protection in Depth Minimum consequence of component failure (redundancy) Balanced protection 
C. Protection in Depth Minimum consequence of component failure (redundancy) Power Redundancy 
D. Protection in Depth Layered Perimeter Utility Support 

Answer: B 


10.What are the three contributors to cost of replacement? 

A. Repair and Replacement cost Freight and Shipping charges Make — ready or preparation cost to install 
it or make it functional 

B. Insurance Cost Freight and Shipping charges Make — ready or preparation cost to install it or make it 
functional 

C. Upgrade Cost including replacement fee Freight and Shipping charges Make — ready or preparation 
cost to install it or make it functional 

D. Purchase price or manufacturing cost Freight and Shipping charges Make — ready or preparation cost 
to install it or make it functional 

Answer: D 
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11.What is the formula for lost income cost? 


A. | = i/365 x P x t, where: | = Income earned | = annual percent loss of return P = Principal amount) in 
dollars) available for investment t = time (in days) during which P is available for investment 

B. | = i/365 x P xt, where: | = Income lost | = annual percent rate of return P = Principal amount) in dollars) 
available for investment t = time (in days) during which P is available for investment 

C. | = i/365 x P x t, where: | = Income earned | = annual percent rate of return P = Principal amount) in 
dollars) available for investment t = time (in days) during which P is available for investment 

D. | = i/365 x P x t, where: | = Income earned | = annual percent rate of return P = Principal amount) in 


dollars) lost on investment t = time (in days) during which P is available for investment 
Answer: C 


12.What is the cost of loss formula? 

A. K = (Cp + Ct + Cr + Ci) — (l- a), where: K = criticality, total cost of loss Cp = cost of temporary insurance 
Ct = cost of temporary substitute Cr = total related costs Ci = lost income costs | = available insurance or 
indemnity a = allocable insurance premium amount 

B. K = (Cp + Ct + Cr + Ci) — (l- a), where: K = criticality, total cost of loss Cp = cost of permanent insurance 
Ct = cost of temporary substitute Cr = total related costs Ci = lost income costs | = available 

insurance or indemnity a = allocable insurance premium amount 

C. K = (Cp + Ct + Cr + Ci) — (l- a), where: K = criticality, total cost of loss Cp = cost of permanent 
replacement Ct = cost of temporary substitute Cr = total related costs Ci = lost income costs | = available 
insurance or indemnity a = allocable insurance premium amount 

D. K = (Cp + Ct + Cr + Ci) — (l- a), where: K = criticality, total cost of loss Cp = cost of permanent 
replacement Ct = cost of temporary substitute Cr = total insurable costs Ci = lost income costs | = 
available insurance or indemnity a = allocable insurance premium amount 

Answer: C 


13.What are the elements of a systems approach to developing a physical protection system (PPS)? 
A. Assessment of needs Implementation of countermeasures Evaluation of effectiveness 

B. Assessment of vulnerability Implementation of countermeasures Evaluation of effectiveness 

C. Assessment of vulnerability Evaluation of effectiveness and Defence in Depth 

D. Assessment of needs Implementation of countermeasures Evaluation of effectiveness 

Answer: B 


14.What three questions does a risk assessment attempt to answer? 

A. What Protocols currently exist? What is the likelihood it would go wrong? What are the consequences? 
B. What can go wrong? What is the cost associated? What are the consequences? 

C. What resources are available? What is the likelihood it would go wrong? What are the consequences? 
D. What can go wrong? What is the likelihood it would go wrong? What are the consequences? 

Answer: D 


15.What four questions does risk management attempt to answer? 

A. What can be done? What options are available? What are the associated trade-offs in terms of costs, 
benefits, and risks? What are the impacts of current management decisions on future options? 

B. What is the cost? What options are available? What are the associated trade-offs in terms of costs, 
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benefits, and risks? What are the impacts of current management decisions on future options? 

C. What can be done? What protocols are available? What are the associated trade-offs in terms of costs, 
benefits, and risks? What are the impacts of current management decisions on future options? 

D. Who is responsible for completing the Risk Management matrix? What options are available? What are 
the associated trade-offs in terms of costs, benefits, and risks? What are the impacts of current 
management decisions on future options? 

Answer: A 


16.What is the design — basis threat? 

A. The cost incurred for the utility being protected. It is used to help design and evaluate a physical 
protection system (PPS) 

B. The adversary against which the utility must be insured against. It is used to help design and evaluate 
a physical protection system (PPS) by the CISO 

C. The cost incurred for the person being protected. 

D. The adversary against which the utility must be protected. It is used to help design and evaluate a 
physical protection system (PPS) 

Answer: D 


17.What are the three general measures to valuing assets? 
A. Cost Consequence criteria Policy 

B. Insurance Fees Consequence criteria Policy 

C. Asset Liability Consequence criteria Policy 

D. Value of the Assets Consequence criteria Policy 
Answer: A 


18.What is the difference between asset protection and security? 

A. Assets protection includes all security functions, as well as related functions such as investigations, 
legal oversight, risk management, safety, compliance, and emergency management. 

B. Assets protection includes only physical security related functions. 

C. Assets protection includes all security functions, as well as related functions such as investigations, 
risk management, safety, human resources, compliance, and emergency management. 

D. Assets protection includes all security functions, as well as related functions such as investigations, 
risk management, safety, compliance, and emergency management. 

Answer: D 


19.Assets protection is increasingly based on what principle? 
A. Risk management. 

B. Insurance Cost 

C. Legal requirement 

D. Cost of replacement 

Answer: A 


